CVE-2026-55885 | getgrav Grav up to 1.7.52 Backup Download Endpoint user/accounts/admin.yaml admin-nonce weak password hash

July 10, 2026 Yanac

A vulnerability was found in getgrav Grav up to 1.7.52. It has been rated as problematic. This vulnerability affects unknown code of the file user/accounts/admin.yaml of the component Backup Download Endpoint. This manipulation of the argument admin-nonce causes password hash with insufficient computational effort.

This vulnerability is registered as CVE-2026-55885. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More